All tools/Email Security/02

BEC Lookalike Domain Detector

Find the domains attackers register to look like yours.

Generates typosquats, homoglyphs, and BEC keyword variants of a domain, then checks which ones are registered and able to send mail.

Demo — no DNS lookups are performed; a previously captured result is shown

Sample result. These findings are real output from scanning example.com on 2026-09-13. Your own input was not scanned, and nothing you enter here leaves your browser.

Live access is by invitation. Verify an approved email to run this page against your own target, or ask for access.

What gets checked

12

TLD swaps

yourcompany.net / .org / .co / .io / .ai…

40+

BEC keywords

yourcompany-login.com / secure-yourcompany.com…

30+

Typosquats

Transpositions, missing chars, doubled chars

10+

Homoglyphs

0→o, 1→l, rn→m look-alike substitutions

Each variant is probed for A records (live site) and MX records (email capability) via DNS-over-HTTPS

hodan.ai — Security tooling